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In this paper, we present sufficient conditions for states to have positive distillable key rate. 
Exploiting the conditions, we show that the bound entangled states given by Horodecki et 
al. [Phys. Rev. Lett. 94, 160502 (2005), quant-ph/0506203 have nonzero distillable key rate, and 
finally exhibit new classes of bound entangled states with positive distillable key rate, but with neg- 
ative Devetak- Winter lower bound of distillable key rate for the ccq states of their privacy squeezed 
versions. 
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I. INTRODUCTION 

Quantum cryptography provides us with a perfectly se- 
cure cryptosystem, which is feasible in a practical way as 
well as in a theoretical way. In particular, quantum key 
distribution among quantum cryptographic protocols can 
be considered as one of the most important applications 
of quantum entanglement, since secure key distillation in 
quantum key distribution is closely related with entan- 
glement distillation [l], 0] . 

It has been known that there are two different types 
of entanglement. One is called the free (or, distillable) 
entanglement, from which one can distill a pure entangle- 
ment useful for quantum communication by local quan- 
tum operation and classical communication (LOCC), and 
the other is called the bound (or, nondistillable) entan- 
glement, which is not distillable. Even though one can- 
not distill a pure entanglement useful for quantum com- 
munication from the bound entanglement, it has been 
shown that any bound entangled states can be useful 
in quantum teleportation d, 0|. Recently, Horodecki et 
al. H, 0, § have shown that there are some classes of 
bound entangled states with positive key rate by show- 
ing that the lower bound K£ w of distillable key rate 
introduced in [5| is more than zero for those states. 

However, the question of whether every entangled state 
has positive distillable key rate, Kd > 0, has still re- 
mained open. In this paper, we investigate the properties 
of quantum states with nonzero distillable key rate, and 
construct several sufficient conditions of Kr> > 0. Ex- 
ploiting the conditions, we show that the bound entan- 
gled states with positive partial transpose (PPT) given 
in [f| 0, Q have nonzero distillable key rate, and finally 
present a new class of PPT bound entangled states sat- 
isfying Kd > 0, although K§ < for the ccq states of 



their privacy squeezed versions presented in @, @] ■ 

This paper is organized as follows. In Sec. |TT] we re- 
call the concepts of private states and distillable key rate 
m 0). In Sec. [m] we construct the sufficient conditions 
for states with Kd > 0. In Sec. lIVI we show that the PPT 
bound entangled states given in @,0,Q have nonzero dis- 
tillable key rate, and exhibit new classes of PPT bound 
entangled states satisfying Kd > 0, but K£ w < for 
the ccq states of their privacy squeezed versions. Finally, 
in Sec. IV] we summarize our results. 



II. PRIVATE STATES AND DISTILLABLE KEY 
RATE 

For a positive integer d > 2, a private state (or, pdit) 
Iaba-b' on C dA <g> C dB <8> C dA ' <g> C dB ' with d A = d B = d, 
is defined as jaba'B' = U\ip^)(tfj^ \ ®p A 'B'U\ where 



(1) 



fc=0 



Pa'B' is an arbitrary state of the subsystem A'B', and U 
is an arbitrary twisting operation 



U= J2 \kl){kl\®U kl 



(2) 



fc,2=0 



with unitary matrices U k i- Then ^aba'B' can be rewrit- 
ten as 



1ABA 



^ d-1 

' B ' = 1 H \kk){ll\®U kk p AIB ,Ul v 



(3) 



k,l=0 
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When d — 2, jabA'B' is called a private bit (or, pbit). 
Then we can have the following proposition Q. 

Proposition 1. If a state p € B(C 2 ®C 2 ®C d ®C d ') with 
P = T,i,j,k,l \ij)(kl\®Aiju fulfills ||A)oii|| > l/2-£, then 
for < e < 1 there exists a pbit 7 such that \\p — 7|| < 



2 



5(e) with 8(e) vanishing, when e approaches zero. More 
specifically, 



6(e) = 



(8\/2£ + h(2V2e)J + 2\/2e, 



(4) 



where h is the binary entropy function. 



Now, we define the distillable key rate Kd as presented 
in 0. Let p AB be a given state in B(C dA ®C dB ). For 
each positive integer n, consider a sequence P n of LOCC 
operations such that Pn(p®s) is a state in B(C dn (g>C dn ). 
The family of the operations V = {P n : n E N} is called 
a pdit distillation protocol of pab if 



hm ||P„(^)- 7^11=0, 



(5) 



where jd n is a pdit whose AB part is of dimension d 2 . 
The raie of a protocol V is given by 



R-p = lim sup 



log d„ 



(6) 



and the distillable key rate of pas is defined as the max- 
imum rate of a protocol 



K d(pab) = sup R-p. 
v 



(7) 



Then the following proposition for the distillable key rate 
Kjj can be obtained, as shown in |7|. 

Proposition 2. If a state p is close enough to a pbit in 
trace norm, then Krj(p) > 0. 



III. SUFFICIENT CONDITIONS FOR 
POSITIVE DISTILLABLE KEY RATE 

Proposition [5] in Sec. HT1 provides us with a simple suf- 
ficient condition of K~d(p) > 0, as follows. 

Lemma 1. If one can transform, by LOCC, such as the 
recurrence protocol, sufficiently many copies of a state p 
into a state close enough to a private state in trace norm, 
then K D (p) > 0. 

Proof. Assume that, by LOCC, the state of sufficiently 
many copies of p is transformed into p' , which is close 
enough to a pdit in trace norm. Then, by Proposition [2l 
p' has a nonzero distillable key rate, that is, Ku(p') > 0. 
Thus, by the definition of Ad, there exists a family of 
LOCC operations Vo such that 



R-p = lim sup 



log d„ 



(8) 



is nonzero for p' . 

Now, let us consider K D (p) in accordance with K D (p'). 
By the assumption, p' can be made out of sufficiently 
many m copies of p by LOCC, which is denoted by P 1 . 



We let V = {P o P' : P e V Q }. Then V is a pdit distilla- 
tion protocol of p, and hence we clearly obtain 

K D (p) >R V = hm sup = ^ > 0. (9) 

n^oo mn m 

Therefore, this completes the proof. □ 

By Lemma [TJ we have an explicit form of a sufficient 
condition for Krj > 0. 

Theorem 1. Let p be any state in B(C 2 ® C 2 <g> C d ® 
C d ) with p = £* ijjM=0 Kj)(M| <g> Ay W . // HAwooll = 
||A)oii|| = ll^mill and HAnoiH < ||A oii||, H^ioioll < 
jjAooii I, then K D (p) > 0. 

Proof. Repeating the recurrence protocol on many copies 
of p, by Lemma [5] in Appendix, we can obtain 



1 

" N 
I Ann 



0000 
0100 



4 



.4 

^1000 

4®" A 



0001 
0101 



.4 



0010 ^0011 

Atgm 
/in 



^0110 ^0111 
1001 ^1010 -^-1011 
1101 ^1110 ^1111 



(10) 



where A = ||Axxio|| n + II AnoiH" + ll^ioiol!" + ll^iiiil, 
Then we have ||A 00 n|| = ll^ooiill™/^, where A 0011 is the 
upper-right block of p' . 

Since ||A noo|| = IIAxnill = ll^mill, l|Anioi|| < 
|| Anon ||, and ||A 10 io|| < ||A on||, we can readily show 
that ||A 0011 | converges to 1/2 as n tends to infinity. 
Therefore, by Proposition [1] and Lemma [TJ we conclude 
that Kd(p) is positive. □ 

By Theorem [1] we clearly obtain the following corol- 
lary. 

Corollary 1. Let p be a state in B(C 2 ® C 2 <g> C d ® C d ) 
of the form 

®CT0 + \(j>~)((t>~\ ®Ol 
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o + |</> ){4> | ® 



0~3, 



(11) 



where |0 ± ) and l^^) are -BdZ states in C 2 ®C 2 . TTien if 
1 1 cr — (Ti|| > 1/2 and tr(crn<xi) = 0, i/ien Krj(p) > 0. 

Proof, p has the following matrix form: 



1 

P= 2 



(T + Cl (T — (Tl 

(T 2 + (T 3 CT 2 - (T 3 

0"2 — 0"3 CT2 + (T3 

(To — (Tl (To + Cl 



(12) 



By LemmaUin Appendix, we have || (To — (Ti || = ||a"n+o"i||, 
and hence || cr 2 H- cr 3 1| < 1/2 < ||0"o + cti||. Therefore, since 
all the hypotheses in Theorem[JJare satisfied, we conclude 
that K D (p) > 0. □ 

Now, let us consider the privacy squeezed state gab of 
p in Eq. (fTTj) , which has been introduced in @, [1| , is 



aAB= 2 



(TO + Tlj 




(T - (Tl| 





|o"2 + 0S\ 
\o~2 ~ (T 3 | 







02 - cr 3 1 
(T2 + 0"3| 





I CO - (Tl| 




(TO + 0l| 

(13) 
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and let \^)abe ^ e a purification of gab- Then 

I*) abb = v^ + )|e ) + Vj/|^~)|ei) 

+V^|^ + )|e 2 ) + V^|^ _ >|e 3 ) 

= i|00)<8(Vi|eo> + Vv|ei» 

+~|11><8 (Vi|e ) - Vy|e x )) 

+ i|01)®(V^|e 2 ) + V^|e 3 )) 



+-|10)® (Vi|ea> 



V^|e 3 » , (14) 



where 



2^o 



2 U|CT0 



1 

2 
1 

2 
1 

2 



2 (11^2 + 0"3|| + ||o- 2 - O-sl!) 



0-3 



02 — (T3 



(15) 



By simple calculations, we can know that the ccq state 



ccq 
1 ABE 



Of 1*: 



ABE 



is 



ccq 
7 ABE 



I 1 

= 9 £ liiXy'l®^. 



(16) 



i,3'=0 



where Pooj Pli, Poii an( A -P10 are the projections onto the 
subspaces spanned by v^| e o) + \/yl ei )> V^l e o) ~\/^l ei )' 
\[z\ei) + \Z^l e 3), and \fz\e 2 ) - \fw\es), respectively. 

We note that one can get K£ w = I (A : B) - I(A : E) 
bits of key for the ccq state obtained from the state 
W abe by Devetak- Winter [5j protocol, where I (A : 
B) = S(A) + S{B) - S{AB), S being von Neumann en- 
tropy. Therefore, by straightforward calculations, one 
can obtain 



Kg w (a ccq 



ABE J 



l-S(E), 



(17) 



and 



S(E) = —x log 2 x — y log 2 y — z log 2 z — w log 2 w. (18) 
Hence, we obtain the following lemma. 

Lemma 2. Let p be a state in B(C 2 <g> C 2 <g> C d <g) C d ) 
0/ i/ie /orm wi Eq. (|11|) . and Zei cr^^ 6e i/ie ccg staie 
obtained from the privacy squeezed state of p. Then 



KE w (c 



ABE) 



1 — S(E), and furthermore, 



S(E) = -x\og 2 x - y\og 2 y - z\og 2 z - w\og 2 w, (19) 
where x, y, z, and w are in Eq. (|15|) . 



We now present another sufficient condition of Kp > 0, 
which is a generalization of a result of Horodecki et al. 
(Proposition 1 in [8|). 



Theorem 2. Let p be any state in B(C 2 ® C 2 ® C d ® C d ) 



(II -^0000 1 
(II ^0000 1 

(P0101I 



l^iiu||)/2- 

l^nu||)/2 

|Aioio||)/2- 



I A)on| 
I A)on| 

K^ono 



w = (P0101II + PioiolD/2- ||4>no|| 



(20) 



If -x\og 2 x - y\og 2 y - z\og 2 z - w\og 2 w < 1, then 
Kd{p) > 0. More specifically, 

K D {p)>l + x\og 2 x + y\og 2 y 

+ z log 2 z + w log 2 w > 0. (21) 

Proof, p has the matrix form 



P = 



Aqoqo Aoooi Axno ^4oon 

^4oioo Anoi Anio Ann 

^1000 ^-1001 ^-1010 ^-1011 

^■1100 ^4iioi ^4ino ^-1111 



(22) 



If we apply an appropriate twisting operation first, then 
we can get 



(23) 

101O) -Bono, 





' Poooo 


PoOOl 


BoOlO 


-Boon 


Ptw — 


P0100 


PoiOl 


PoilO 


Pom 


P1000 


P1001 


P1010 


P1011 




. -B1100 


P1101 


Pmo 


-Bun . 



where Poooo, -Bim, -B on, 
and -B1001 are positive and 



-Bnooj Bqioi, B 



tr-Boooo 
tr-Boon 
tr-Boioi 
tr-Bono 



^0000 1 
IAjoiiI 
|A)ioi| 
Aruo 



tr-Bim 
tri?noo 
trSioio 
trSiooi 



l^iml 

I -^1100 1 

I ^1010 1 

K^lOOl 



(24) 



By the same LOCC on the subsystem AB as the depo 

:an get the fol 





larization in C 2 ® C 2 , we can get the following state 



Ptv 



2 




L+gl 



Boon +-B1100 
2 

Bmm+Binio Bquq+Bioqi r> 

2 2 
Bmin+Binni Bqiqi + Biqiq rt 
2 2 

Q Q B0000+B1111 

2 (25) 

Let be the privacy squeezed state of pt w , and cr^J B 
be the ccq state obtained from c^. We remark that 
the distillable key rate of pt w is the same as that of the 
original state p, and furthermore ^abe nas ^ e ra, t e 
no better than that of ptw @, 0, 11]^ Since ptw is of the 
form in Eq. (|11[) . for x, y, 0, and w in Eq. (|20p . we 
straightforwardly obtain 

^Vabb) = 

= 1 + x \og 2 x + y log 2 y 

+z log 2 z + w log 2 w, (26) 

by Lemma [21 Since — x log 2 x — y log 2 y — z log 2 z — 
wlog 2 w < 1 by our hypothesis, we have 

K D (P) > KE w (o-Tbe) = 1 - S(E) > 0. (27) 

□ 



4 



IV. EXAMPLES 

We first consider the PPT states with > pre- 
sented in [|,0|. 

Example 1. Let g s — 2P sym /(d 2 + d) and g a — 
2P as /(d 2 — d) with the symmetric projector P sym and 
the antisymmetric projector P as on C d (8 C d , and 



P= 2 



p(n+T ) o o p(n-ro) 

(l-2p)r 

0(1- 2 P )t 

p(n - t ) p(n + T ) 



(28) 



where t = g® ! and n = [(&, + £> s )/2p 
obtain 



Then we can 



P = 



1 

2 m iV 



[p(ri+T )f m 



\p(n-T )f m 



o o [p( n - t )] 

[(1 - 2p)r f m 

[(l-2p)T f m 

o o \p( n + t )] 



(29) 



with TV = 2p m + 2(1/2 - p) m , from p by the recurrence 
protocol. Then it follows from Lemma [3] in Appendix 
that the state p is PPT for p e [0, 1/3] and (1 -p)/p> 



[d/(d- 
Let 



1)] , and hence the state p' is also PPT. 



2 rn N 
1 

2 m N 



[||p( n+T0 )|p + ||p( ri 

[||j?(n +T )|| m - \\p{n 



ro)\\ 
ro)|| 



1 



2 m A 



(1 - 2p)x | 



(30) 



Then for p £ (1/4, 1/3], by choosing sufficiently large m 
and I, we have — x log 2 x— y log 2 y— z\og 2 z— w log 2 w < 1. 
Therefore, we can obtain the PPT states with Kjj > 
by Theorem [21 

We consider the low-dimensional PPT states with 
Kd > presented in 

Example 2. For two private bits 71 and 72, take any 
biased mixture of the form: 



P = Pill 
with pi > p 2 and = [<j x ]a 



Pio^ 2 oi 



(31) 



Ia'bb 1 , where a x is one 
of Pauli matrices representing the bit flip. Then p has 
the following matrix form. 



Pi 







a 2 a 2 



x x x\ 

P 2 

PiX\ 
PiX\ 





P1X 2 



P2 



X 2 X 2 









Pi^/xlXi 
(32) 



where Ai and X 2 are arbitrary operators with trace norm 
one. Then we can easily show that the values x, y, z, and 
w in Theorem [5] are x = p%, y = 0, z = P2, and w = 0. 
By Theorem[2j Kr>{p) > since pi +p 2 = 1 and p\ > p 2 - 

We present the PPT states with Kd > which can be 
shown by Theorem [T] 

Example 3. For < q < (2 - V2)/8, let 

l-2<7 



4 + 2^' 
ao = p(|0+)(0+| + |Ol)<Ol|), 

^1 = p(|^X^| + |io>(io|), 



(33) 



(34) 



and let T denote partial transposition over the subsystem 
BB' . Then we have tr(<7o<7i) = 0, 

C + 0"! = pl= CTq + of, 

o-o -o-i = p(|00)(ll| + |ll)(00| + |01)<01|-|10)(10|), 
(<7o-<Ti) r = p(|01)<10| + |10)(01| + |01)<01|-|10)(10|) 

= >/2p|£o><£o|- V2p|a>(6l, (35) 
for some orthonormal |£o) and with 

i?o>(eoi + iaxai = |oi)(oi| + |io)(io|. (36) 

Now, let 

p = \<p + )((f> + \ Oo-o + |^")(<^"| Ocri 

+ |V' + )(^ + | ®a-2 + |^")<^"| ®o-3, (37) 



5 




where 



0o 

0"! 



P(k + )(0 + | 



|01)(01|), 
|10)(10|), 



<r 2 = 4=(|01)<01| + |10)<10|) 



V2 



-|00)(00| + ^|11)(11|, 



(42) 



with p = (1 - 2g)/(4 + 2^/2) for < g < (2 - V2)/8. 
Then since 











- of 






r r 

2a 2 r 




(43) 



FIG. 1: The values of K D for the ccq states of the privacy 
squeezed states: The solid and dashed curves represent the 
values of Kp W for the ccq states of their privacy squeezed 
states in Example [3] and Example [4j respectively. 



where 



and 2(72 i (°o — °i) ^ s positive, g is a PPT state by 
Lemma [3] in Appendix. Since g satisfies all conditions of 
Theorem [TJ and therefore Kd{q) > 0. 

However, as in Example [31 we can see that K® w < 
for the ccq states of their privacy squeezed states. More 
precisely, one can obtain that 



02 
03 



v^l&X&l 



g|00)(00|, 
g|00)(00|. 



K 



DW 



(38) 



= l + 4plog 2 4p 

+2(V2p + g)log 2 (x/2p+g) (44) 



Then \\<r - cr a | 
laryCTJthat K D {p) > 
Since 



4p > 1/2, and it follows from Corol- . . t ,,». x ,„ AJ\ /o • t?- m 

n is negative for all < q < (2 — v2)/8, as seen m -big. [1J 



CT2 
02 



C3 
0"3 



(o-o-ci) , 

VM|£o)(£o| 

V2p(|01)(01| 

(cr 2 + cr 3 ) r , 



- 110x10]) 



2g|00)(00| 
|-2g|00)(00| 



(39) 



p v = p, that is, p has PPT. Therefore, p's are the PPT 
states with positive distillable key. 

However, since the values x, y, z, and w in Theorem^ 
are x = 4p, y = 0, z — 2\/2p + g, and w = g, 



A' 



4plog 2 4p + glog 2 g 
+ (2\/2p + g)log 2 (2V2p + g) (40) 

is not always positive for < g < (2 — y2) /8 as seen 
in Fig. [U where cr^^ is the ccq state for the privacy 
squeezed state of p. Therefore, when K£ w < 0, by 
means of Theorem [51 one cannot determine whether p 
has positive distillable key rate or not, although one can 
readily show that K D {p) > by Corollary [TJ 

We now present another PPT states with Ko > but 
Kp W < for the ccq states of their privacy squeezed 
states. 



Example 4. Let 



Q= 2 



<JQ + (J I (JQ — (T\ 

2ct 2 

2cr 2 

(To — ai cr + (7i 



(41) 



V. SUMMARY 

We have investigated properties of quantum states 
with positive distillable key rate, and have constructed 
sufficient conditions for states to have positive distillable 
key rate. Exploiting the conditions, we have shown that 
the PPT bound entangled states given by Horodecki et 
al. @, 0,9 have nonzero distillable key rate, and have ex- 
hibited a new class of PPT bound entangled states with 
Kd > 0, but with Kp W < for the ccq states of their 
privacy squeezed versions. 
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APPENDIX: SIMPLE LEMMAS 

In this appendix, we present some simple but useful 
lemmas. 
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A B~ 




X 


B A 




y 



Lemma 3. Let A and B be n x n hermitian matrices. 

r A B 1 

Then „ . is positive if and only if A± B is positive. 
Proof. Let x and y be any vector in C™. Then we have 

[ xt yt ] 

= Ax + y* Ay + x f By + y f Bx 
= i(xt+yt)(A + J B)(x + y) 

+i(xt-yt)(A-B)(x-y). (A.l) 

Therefore, we can clearly obtain the proof of this lemma 
from Eq. ([XT]) . □ 

Lemma 4. For any two positive operators ctq and o~i, 
|°o — fill = ||°"o + fill if an d only ii/tr(crofi) = 0. 

Proof. If tr(fTocri) = 0, then it is trivial that ||<to — fi|| = 
I f o + f 1 1 1 • We now assume that 1 1 oo — f l 1 1 = 1 1 f o + f l 1 1 • 
Note that there exist positive operators tq and t\ such 
that do — o~i = tq — t\ and tr(rori) = 0. Then from the 
following equalities 

tr(oo) - tr(cri) = tr(cr - di) = tr(r - n) 

= tr(r ) - tr(-n), (A.2) 



Hence, we obtain 



and 
tr(cr ) + tr(o-i) 



||oo + fill = ||fo - fill = Iro - Tl|| 
tr(r ) +tr(n), (A.3) 



E 

j eh 



(A.5) 



Since Co and <Ti are positive, it can be obtained that 
(xj\ao\xj) — for any j £ I±, and {xj\a\\x 3 ) = for any 
j G Iq. Therefore, we conclude that tr(cr f l) = 0. □ 
Now, we consider the recurrence protocol to dis- 
till a pbit (y, LZ|. By simple but tedious calculations, we 
obtain the following lemma. 



Lemma 5 (Recurrence protocol). For any states p\ and 
p 2 m B(C 2 <g> C 2 ® C d ® C d ), let 



Pi 



Arooo 


Aoooi 


Aqoio 


A 


Anoo 


Aqioi 


Aono 


A 


Aiooo 


Aiooi 


^4ioio 


A 


. ^4iioo 


Ahqi 


Amo 


A 



0011 
0111 
1011 



(A.6) 



we obtain tr(<7o) = tr(ro) and tr(<7i) = tr(ri). Since 
tr(roTi) = 0, there exist two disjoint index sets Jo, ii, 
and an orthonomal basis {\xj) : j 6 Iq U I\} such that 

r o = E l jei X o\ x j){ x j\ and T i = EjeJi^l^)^-! for 
some Xj > 0. Then it is straightforwad to have the fol- 
lowing equalities. 

Y (xAaolx-j) - (xAailxj) 
jeio jei 

= tr(r ) = tr(cr ) 

= E (^KK) + E <^jr|cro|^j>- (A.4) 



Pi = 



-E>0000 


^0001 


-BoOlO 


B 


-Boioo 


^0101 


-E>0110 


B 


Siooo 


^1001 


-E>1010 


B 


. -Biioo 


-Biioi 


-Bmo 


B 



0011 
0111 
1011 

1111 



(A.7) 



After some LOCC operations in the recurrence protocol, 
Pi ® P2 can be transformed into a state in 23(C 2 (S> C 2 <S> 

d 2 d 2 

C <8> C ) . Let pjj be the resulting state when the mea- 
surement outcome is jj . Then we have 
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(A. 



where 



with j = j + 1 (mod 2) . 



TVo = £ IM 

j,k=0 



and 



Ni=Y, W A ^k\\ ■ \\B Wfk \\, (A.10) 

j,k=0 
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